registry / @nextclaw/ui / 0.15.5

@nextclaw/ui@0.15.5

Official NextClaw Web UI package.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. The package is a browser UI that sends user-initiated requests to its configured NextClaw runtime and conditionally renders user-selected office files.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User opens the UI, performs a runtime action, or previews a .pptx file.

Impact

No unconsented install-time execution, credential harvesting, persistence, destructive behavior, or exfiltration was found.

Mechanism

Configured API/WebSocket client plus lazy browser-side document rendering.

Rationale

Direct inspection does not substantiate the scanner labels: the package lacks lifecycle execution and the flagged bundle behavior is an inert browser-side presentation renderer. Its network and configuration operations are package-aligned UI calls to the configured NextClaw runtime.

Evidence

package.jsonvite.config.tspublic/sw.jssrc/shared/lib/transport/remote-transport.service.tssrc/features/chat/features/workspace/components/file-content-preview/workspace-presentation-preview.tsxdist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jssrc/shared/lib/api/api-base.tssrc/shared/lib/transport/request-raw-api-response.utils.tssrc/shared/lib/transport/transport-websocket-url.utils.ts

Network endpoints2

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no preinstall, install, postinstall, prepare, bin, or executable entrypoint.
src features are browser UI code; no child_process, shell execution, eval, Function constructor, or source require calls were found.
dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.js has no bidi control characters; its flagged require/eval strings are internal minified library identifiers/method names.
PPTX renderer is dynamically loaded only when the user previews a .pptx file, with supplied file data and zip limits.
Network code targets the configured NextClaw runtime/local default and same-origin PWA cache; no hard-coded exfiltration endpoint was found.
No packaged native binaries or agent-control-surface install-time mutation were found.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStrings

Source & flagged code

3 flagged

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView file

23contains invisible/control Unicode U+200B (zero width space) `){let e=u.endParaRPr.numAttr(`sz`);if(e!==void 0){let t=document.createElement(`span`);t.textContent=`<U+200B>`,t.style.fontSize=`${e/100*o}pt`,(k??m).appendChild(t)}}r.appendChild(m)}}function LH(e){let t=0,n=0;for(let r of e.allChildren(

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L23

36if (!pdfjsLib) { L37: pdfjsLib = await import(pdfjsUrl); L38: pdfjsLib.GlobalWorkerOptions.workerSrc = pdfWorkerUrl;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L36

package.jsonView file

Lines 41-69json

41 "@nextclaw/agent-chat": "0.3.2",

42 "@nextclaw/ncp-http-agent-client": "0.4.3",

43 "@nextclaw/ncp-react": "0.5.4"

44 },

45 "devDependencies": {

46 "@testing-library/react": "^16.3.0",

47 "@testing-library/user-event": "^14.6.1",

48 "@types/react": "^18.3.12",

49 "@types/react-dom": "^18.3.1",

50 "@vitejs/plugin-react": "^6.0.1",

51 "autoprefixer": "^10.4.20",

52 "jsdom": "^25.0.1",

53 "postcss": "^8.4.49",

54 "prettier": "^3.3.3",

55 "tailwindcss": "^3.4.15",

56 "tailwindcss-animate": "^1.0.7",

57 "typescript": "^5.6.3",

58 "vite": "^8.0.3",

59 "vitest": "^4.1.2"

60 },

61 "scripts": {

Medium

Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg · L61

62 "dev": "vite",

63 "build": "vite build",

64 "preview": "vite preview",

65 "lint": "eslint .",

66 "tsc": "tsc --noEmit",

67 "test": "vitest run"

68 }

69}

Source & flagged code

3 flagged · loading source

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L23

36if (!pdfjsLib) { L37: pdfjsLib = await import(pdfjsUrl); L38: pdfjsLib.GlobalWorkerOptions.workerSrc = pdfWorkerUrl;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/aiden0z-pptx-renderer.es-D87ywFdC.jsView on unpkg · L36

package.jsonView file

•Remote tarball dependency specs: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz

Findings

1 Critical6 Medium5 Low

CriticalTrojan Source Unicodedist/assets/aiden0z-pptx-renderer.es-D87ywFdC.js

MediumDynamic Requiredist/assets/aiden0z-pptx-renderer.es-D87ywFdC.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

MediumRemote Tarball Dependencypackage.json

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings